Описание
Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.
Ссылки
- Not Applicable
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 7.10.5.0 (исключая)
cpe:2.3:a:rocketsoftware:trufusion_enterprise:*:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.01249
Низкий
7.3 High
CVSS3
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 7.3
github
4 месяца назад
Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections. However, the proxy is misconfigured in a way that allows specifying absolute URLs in the HTTP request line, causing the proxy to load the given resource.
EPSS
Процентиль: 66%
0.01249
Низкий
7.3 High
CVSS3
Дефекты
CWE-918